{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:6774d682-6aa6-5b02-bb66-0826882b21f3",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "dompurify",
      "purl": "pkg:npm/dompurify@3.4.5-tuxcare.4",
      "type": "library",
      "bom-ref": "pkg:npm/dompurify@3.4.5-tuxcare.4",
      "version": "3.4.5-tuxcare.4",
      "pedigree": {
        "ancestors": [
          {
            "name": "dompurify",
            "purl": "pkg:npm/dompurify@3.4.5",
            "type": "library",
            "version": "3.4.5"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2026-109345",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:8cfe83df-af12-5d0e-988b-abb017d4c2c6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-109345 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49458",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3157fe17-fcdd-56d9-ad2e-e4971aadf775",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49458 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49459",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ce352431-c98a-52c6-8945-7b61cbdfc035",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49459 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-49978",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:235da146-91b2-5955-ba2b-f5a16c5708eb",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-49978 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65898",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:adac3edc-904a-5fea-bb06-c9cc4c2313c8",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65898 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65899",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d0fc1d75-0bb4-5b68-8b34-ba6e32ec871d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65899 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65900",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:f6417af0-af6e-599e-a751-cef8fef15c4b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65900 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65901",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:1a1e62a2-0c93-590d-b772-b3eb38c12e56",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65901 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-65902",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:52fe8033-bbdc-5ebf-8252-39d71709d71d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65902 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-66010",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:72276368-4207-5d60-984b-9c810967ab17",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-66010 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "CVE-2026-75838",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:ac295cd0-d4bd-5116-9200-cc1897b0be0f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-75838 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-55q2-fjhq-7xh7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7ee0273f-c1f4-5225-b90f-6842ab0f7a1b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-55q2-fjhq-7xh7 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-6688-9rhm-gjv2",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:453b5229-96dd-56d2-9712-691c7a5ba284",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-6688-9rhm-gjv2 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-c6gr-qvv4-5v3f",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:bdc5e05d-4258-5d25-8518-a11ef53ad835",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-c6gr-qvv4-5v3f is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-cg2g-xh64-v4q7",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:d7f654c4-7753-525f-97a4-a957dc35ab8b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-cg2g-xh64-v4q7 affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-cmwh-pvxp-8882",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:5796eb3d-e046-5d33-9f1d-c8793bf60c52",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-cmwh-pvxp-8882 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-jxrp-r7gx-q4j8",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:2bcd1792-1749-5182-8a65-998e729a3213",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability GHSA-jxrp-r7gx-q4j8 is a false positive for dompurify 3.4.5-tuxcare.4."
      }
    },
    {
      "id": "GHSA-mrv2-3pqr-j5jr",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:31ce3096-4b26-5f30-9336-706544a7ffda",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mrv2-3pqr-j5jr affects version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-r47g-fvhr-h676",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:7ab8a03e-f5ee-5e2c-a79c-4f8c46e561d3",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-r47g-fvhr-h676 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    },
    {
      "id": "GHSA-vxr8-fq34-vvx9",
      "affects": [
        {
          "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
        }
      ],
      "bom-ref": "urn:uuid:3d8e16ce-c28b-50a8-ab66-0025fde3277d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability GHSA-vxr8-fq34-vvx9 is fixed in version 3.4.5-tuxcare.4 of dompurify."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/dompurify@3.4.5-tuxcare.4"
    }
  ]
}